diff --git a/.github/workflows/sbom-generation.yml b/.github/workflows/sbom-generation.yml index 588baefe1e..b790d804d4 100644 --- a/.github/workflows/sbom-generation.yml +++ b/.github/workflows/sbom-generation.yml @@ -54,7 +54,7 @@ jobs: persist-credentials: false - name: Generate SPDX SBOM and submit dependency snapshot - uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0 + uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2 with: path: . format: spdx-json @@ -66,7 +66,7 @@ jobs: dependency-snapshot: true - name: Generate CycloneDX SBOM - uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0 + uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2 with: path: . format: cyclonedx-json